This video demonstrates an ACL-only attack path in Active Directory, including clean-up steps along the way. The end result is complete ownership of the domain without pivoting to any other systems, and leaving the domain as it was before the attack path started. Presented at DerbyCon 7.0 Legacy during the talk, "Here Be Dragons: The Unexplored Land of Active Directory ACLs".

Video of the presentation at DerbyCon: [ Ссылка ]
Specter Ops: [ Ссылка ]

свернуть